CyberArk's On The Front Lines webinar series covers a variety of hot topics related to security exploits involving privileged accounts. Our security experts will review a potential threat and demonstrate CyberArk technology and best practices for mitigating risks.

Webinars will be offered the first Tuesday of each month at both 9:00 am EST and 2:00 pm EST.

Privileged Account Security Best Practices for Robotic Process Automation: CyberArk Integration with UiPath

Tuesday, August 7th / 9 a.m. ET and 2:00 p.m. ET

Examining security risks related to privileged credentials: Learn how to proactively secure, protect and monitor privileged credentials in RPA

:

Learn More

RPA software interacts directly with business applications using credentials and entitlements, so this can introduce risks when the robots automate and perform routine business processes across multiple systems.

Learn about the vulnerabilities attackers seek out in RPA, and the methods you can employ to proactively secure, protect and monitor privileged credentials in RPA non-human user entities that mirror human entitlements. We’ll provide an overview and demo of the UiPath platform, show how the integration with CyberArk works and talk about how companies are using it.

During this session, you’ll learn:
  • How to secure RPA credentials using CyberArk and how to integrate with existing procedures and management policies
  • How to implement a seamless, out of box integration with UiPath (Demo)

OTFL Machine Learning Prevents Privilege Attacks at the Endpoint

February 6 / 9 a.m. ET and 2:00 p.m. ET

Endpoint Application Risk Analysis Service: Stephen Lowing and Chuck McAllister

:

Learn More

-

To address ongoing privilege account risk posed by evolving threat tactics, attend this session to learn how, through machine learning and cloud-based analytics, to stop attackers from gaining a foothold on endpoints. By detecting potentially malicious applications, timely, well-informed privilege and application control policy decisions can be made.

During this session we’ll demonstrate:

  • New threat detection capabilities that provide a risk framelet via a dashboard to indicate the
  • amount of accounts that are potentially exposed to credential theft. The ability to detect and control unknown applications from installing and running using file-based machine learning algorithms.

Detecting the Risk Obscured in Hidden Parts of Kerberos

March 6 / 9am EST or 2pm EST

A CyberArk Labs team presentation: Ido Hoorvitch & Lavi Lazarovitz

:

Learn More

-

As long as Kerberos communication is not being decrypted, attackers get an opportunity to act freely using Kerberos without being detected because the encryption is being handed to them on a silver platter. Because Microsoft’s native software uses Kerberos, once control over a computer in a network is obtained, attackers can hide their activities and easily blend into a detection-less highway.

Attend this webinar presented by the CyberArk Labs team to learn how decrypting the Kerberos protocol can bridge the gap between attackers and the defensive side by providing the defenders a real view over the network.

CyberArk & SAP Certified Integration: Secure Critical Business Systems throughout the Enterprise

October 2 / 9am EST or 2pm EST

Presenter: Christian Goetz, CyberArk’s Director of Presales, DACH

:

Learn More

Earlier this year, US-CERT and others warned organizations worldwide about ongoing and eminent cyber attacks targeting ERP applications. A critical part of running a business effectively, securing these high value applications and the related sensitive data they house is a major initiative for virtually every organization.

In this webinar, we’ll explain how organizations can effectively manage, secure and control the use of privileged accounts used by SAP applications and admin. CyberArk augments native SAP security features and best practices, enabling a holistic approach to enterprise security while addressing the elevated risks in an SAP environment.

We’ll discuss and demonstrate how to:

  • Integrate CyberArk & SAP
  • Discover and onboard SAP privileged accounts via native CyberArk REST API 
  • Secure HANA and other SAP systems on the cloud
  • Control SAP applications’ and systems’ access throughout the infrastructure, operating system, and data center

Start-to-Finish Demo: Building Scripts with REST API – Session 2

November 6 / 9am EST or 2pm EST

Presenter: Joe Garcia, Strategic Accounts Solutions Engineer, DevOps Security, CyberArk

:

Learn More


Would you like to learn how to build scripts that use the Enterprise Password Vault (EPV) REST API for automating account creation, user management and more?  Back by popular demand, CyberArk’s Joe Garcia will lead an interactive session and demonstrate how to build an example project. In this session, Joe will demonstrate how to provision a local user on target machine and onboard that target user to the vault. He’ll explain how to identify repeatable tasks that are ripe for automation and then review the decomposition tasks/sub tasks.

Red vs Blue: Best Practices for Jenkins Credentials Management

January 15th / 9am ET or 2pm ET

Presenter: Nimrod Stoler, cyber researcher

:

Learn More

-

CyberArk Labs recently published a series of research on Jenkins credentials management in an effort to educate organizations on potential security risks and share recommended mitigations and best practices for ensuring security and DevOps velocity.


Jenkins is an open source automation server used to accelerate the software delivery process. Widely considered the de facto standard in open source continuous integration tools, the server effectively acts as the DevOps engine, addressing everything from source code management to delivering code to production.

In this session, we’ll demonstrate common attack techniques through red and blue team perspectives and share measures organizations can take to secure secrets and ultimately, protect enterprise assets from common attacks.

Rethink the Threat: A Single View into Privileged Account Risks

February 5th / 9am EST or 2pm EST

A purpose-built solution that provides complete proactive controls on privileged account usage: Asaf Hecht, cyber researcher

:

Learn More

Chris Anderson.jpg

The CyberArk Labs team recently released zBang – an open source tool designed to help security teams discover critical risks associated with privileged accounts. Organizations and red teamers can utilize zBang to identify potential attack vectors and improve the security posture of the network. The results can be analyzed with the graphic interface or by reviewing the raw output files.

In this session, our cybersecurity researcher will introduce the tool and demonstrate how it can be used to discover critical findings including:

  1. The most privileged accounts that must be protected, including suspicious Shadow Admins.
  2. Possible infected DCs with Skeleton Key malware.
  3. Suspicious SID history with hidden privileges.
  4. Risky configurations of SPNs that might lead to credential theft of domain admins.
  5. Risky Kerberos delegation configurations in the network.

During the webinar, we will explain these threats and how to eliminate them with the help of the zBang tool.The tool is freely available on GitHub.

Introducing zBang – an Open Source Tool to Discover Risks Associated with Privileged Accounts

February 5th / 9 a.m. ET and 2:00 p.m. ET

Presenter: Asaf Hecht, cyber researcher

:

Learn More

-

The CyberArk Labs team recently released zBang – an open source tool designed to help security teams discover critical risks associated with privileged accounts. Organizations and red teamers can utilize zBang to identify potential attack vectors and improve the security posture of the network. The results can be analyzed with the graphic interface or by reviewing the raw output files.

In this session, our cybersecurity researcher will introduce the tool and demonstrate how it can be used to discover critical findings including:

  1. The most privileged accounts that must be protected, including suspicious Shadow Admins.
  2. Possible infected DCs with Skeleton Key malware.
  3. Suspicious SID history with hidden privileges.
  4. Risky configurations of SPNs that might lead to credential theft of domain admins.
  5. Risky Kerberos delegation configurations in the network.

During the webinar, we will explain these threats and how to eliminate them with the help of the zBang tool.The tool is freely available on GitHub.

Strengthening Machine Identity Protection – A Combined Venafi and CyberArk Application Identity Manager Solution

September 12 / 2PM EST

Perform sensitive renewal, replacement and rekey operations without administrator involvement: Brian Durkin (Venafi) Joe Garcia and Kevin Ross (CyberArk)

:

Learn More

Kevin Ross.jpg

As part of your SSL/TLS certificate lifecycle management process, Venafi uses privileged credentials stored in the Venafi solution. Based on security and operational needs, CyberArk and Venafi developed a joint integration to automatically protect and manage these credentials in CyberArk, making them available to Venafi, as needed, based on organizations’ security policy. Join us and learn how to:

  • Securely store privileged credentials used by Venafi in the CyberArk solution
  • Automatically rotate credentials used by the Venafi solution
  • Automatically perform credential- protected certificate renewal and replacement operations

Curse of the typo! Automate repeated tasks to improve efficiency and reduce risk around user mistakes

September 19 / 2PM EST

Automate privilege tasks to avoid user error and costly outages: David Higgins

:

Learn More

David Higgins.jpg

Daily repetitive tasks can be inadvertently damaging to a business caused by things human error (typos!) and abuse of privileged access (insider threats!). Automated task management, both in the cloud and on-premises, safeguards your remote vendors and internal users alike by automating manual sometimes critically sensitive privileged tasks while simultaneously improving workflow productivity.

Join this session to see how CyberArk can automate an array of regular tasks with a single click to establish user accountability and better protect your environment.

How Attackers are Using Domain Fronting to Abuse Content Delivery Networks (CDNs)

September 28 / 2PM EST

A Special Red Team OTFL Webinar: Shay Nahari

:

Learn More

In this OTFL session, Shay Nahari, CyberArk’s Red Team lead, will present a new technique for domain fronting, which enables attackers to abuse Content Delivery Networks (CDNs) to mask malware command and control (C2) traffic. While many CDNs are potentially impacted, Akamai is one of the largest. During our research we identified tens of thousands of high reputation domains served by Akamai’s CDN that can be used for domain fronting.

This research demonstrates a new technique for hiding a C2 channel completely within a CDN. We will show POC tools that utilize this technique.

Security that Moves At DevOps Velocity

October 3 / 2PM EST

Join us for Part 1 of our OTFL DevOps Series: Jody Hunt and Evan Litwak

:

Learn More

With the velocity of DevOps, in many cases companies are rolling out applications that fall outside of their normal stringent security policies. Business units are accepting that risk, because in companies where security stop applications rolling out, they lose competitive advantage, despite staying relatively risk free. What is needed is 1) for security, a tool set that allows them to extend our trust networks into a next gen I.T environment without inhibiting the speed/velocity of the cloud and DevOps teams; and 2) for DevOps/cloud teams, you want to be able to move at speed, without being concerned with manual security processes at every turn.

Attend Part 1 of our OTFL DevOps series to learn how CyberArk Conjur helps DevOps teams to secure their secrets, machine identities, and users in highly dynamic DevOps environments at scale

CyberArk Conjur - A library of validated integrations with CI/CD tools

October 17 / 2PM EST

Join us for Part 2 of our OTFL DevOps Series: Jody Hunt and Evan Litwak

:

Learn More

In Part 2 of our DevOps series, we’ll demonstrate how developers can integrate Conjur into their projects with minimal effort.  In order to maintain the software delivery pipeline integrity and to help reduce security risks associated with unprotected privileged credentials embedded into applications, CyberArk Conjur immediately incorporates and mirrors privileged account security policies consistently across the DevOps ecosystem. Attend this session to learn how the CyberArk Conjur Solution:

  • Secures Build Products & CI/CD Tools
  • Provides RESTful API support for automated account provisioning of build products with orchestration tools
  • Removes credentials from code/configuration files
  • Reverts credentials back in case of disruption
  • Authenticates CI/CD tools, images and build product to maintain pipeline integrity
  • Enables credential-protected configuration and orchestration process

Building and Securing Cloud Workloads with AWS and CyberArk

October 24 / 2PM EST

Automating in AWS… with AWS: Andy Givens, CyberArk and Scot Ward, Amazon Web Services

:

Learn More

Andy Givens.jpg

Amazon has set the stage for an evolution in cloud computing. Not only providing a low cost environment to run infrastructure, but by delivering services consumable directly by your application builders. But security of the cloud is a shared responsibility, and in a developer-centric world, organizations must provide security tools that entice developers to build securely, and make it easy to do so. Join speakers from CyberArk and AWS to learn how we work together to help organizations secure their application delivery and management.

The Personal Privileged Users: How to Manage Named Administrators

November 7 / 2PM EST

Mitigate the high risk that expose these users: David Higgins and Lars Melandar

:

Learn More

David Higgins.jpg Lars jpg.jpg


Personal Privileged Users are Strong Named accounts that are owned by individuals in the organization. They could be Domain users that are member of the strongest groups in the ActiveDirectory, such as “Domain Admins”, but they could also be local users with highest permissions on Operating Systems including Unix/Linux and also on Corporate Business Applications.

This session will explore why the Personal Privileged Users are under the highest risk in your organization and how to mitigate those risks.


REGISTER NOW